Den is the local companion on this Mac. You grant a folder. It reads names, sizes, dates, and a hash. Only extracted text can leave. Binaries never do.
The path
1. GrantA folder you choose
2. WatchNames and dates only
3. HashOn this Mac, SHA-256
4. ExtractText, OCR, speech
5. IngestText only, HTTPS
Pause stops reading. Revoke stops that folder. Pictures stays off until you grant it. Chat answers from the collector corpus and cites paths. Press ? to open this help, Esc to close it.
The three surfaces
- Chat asks about what you granted. Answers come from the collector corpus and cite file paths. If nothing matches, it says so. It never invents an answer.
- Status and Consent is where you grant, revoke, pause, and preview. Purge deletes the local ledger, then asks the server to delete extracted text and search vectors. If the server does not answer, the page says so.
- Data and Access shows what left this Mac, connected accounts, whether paranoid mode is on, and Director. Open workspace is optional.
Connected accounts
- This Mac is the first source. Grant a folder on Status. You live in Companion. You do not have to open the suite to start.
- Connect Gmail, Slack, or Drive from Access. That opens the existing handshake at the workspace connectors page. The Den does not run OAuth on localhost.
- There is no 12-app wall on first launch. More accounts live in the workspace if you want them.
- Cloudflare Zero Trust stays on. This is real data.
Director
- Open a follower window from Data and Access, or drop director-client.js into an app you built. It asks this collector for a six-character code.
- Type the code here. Then you can open a surface, open help, ping, or say a short line on that app.
- The collector binds 127.0.0.1 only. Simulators and extra windows on this Mac can join. A physical phone cannot, until a fleet relay exists. That is not built.
The four platforms
- Mac is the native menubar app plus this Den. Pair it to https://app.rocsite.com with a Companion device key.
- Windows, MDM, 100k fleet are a stub. See /fleet. There is no signed exe from this Mac.
- iOS and Android are the existing Capacitor shells of app.rocsite.com. They consume the org. They do not hash this Desktop.
Themes and access
- Dark, Light, and Contrast live in the header. Contrast is for bright rooms and low vision. The choice stays on this Mac.
- Skip to the message box with the first Tab. Tabs are a real tab list. Arrow keys move between surfaces. Escape closes help.
- Chat history is on this Mac only, in companion.db. Clear it any time. Export never includes the device key.
- The plus button attaches files. Documents are extracted here. Media goes to the RocSite engine for transcribe, diarize, and OCR. Originals are not stored. The microphone dictates.
Billing
Personal is billed in the RocSite workspace. This Mac app does not take a card.
Why this is gold, on this Mac, right now
These numbers are live from your ledger. They are not a brochure.
What never leaves
- Photo, video, and audio files themselves. Paranoid turns them into text on this Mac, then only that text can ingest.
- Virtualenvs, caches, git internals, app bundles, trash, files over 2 GB, and listed dataset trees.
- Any folder you have not granted. Archive (Pictures) starts off.
- The device token. The page may show a prefix. The full token is never rendered.
 }}){kind=small}